MAL-2025-70428 Malicious code in royal-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c341bcdaaed3945acb51c1312b486e22ffa89bfd0169328df8631862d077bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66966 Malicious code in binding-peach-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb585e000428d154a8ccac25963434455373163dde7ee81b5257c913bd4c045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68893 Malicious code in initial-beige-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58044d381c1d0493d05ed67b8f291bd04bd3373df00463459d6a6678e1802a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68007 Malicious code in embarrassed-beige-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb43a5191d8af27f244b1a7a0dec77f265c5cb0371670863d6b8d71823bd7d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67594 Malicious code in current-tomato-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d9e506cef16bae43fb33a25ba234d7eb3565bd863fe16f392284a781a8ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69756 Malicious code in original-amethyst-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39b544048410f058f36b431b65c7f09ddd1082302da253620ef8b177dfd5e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67603 Malicious code in cute-moccasin-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b215114b24cea060a5d43e004890d685bc745ed9ce300037d88d972ede69164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71726 Malicious code in yielding-indigo-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e2a521bb060ff9171cfad4e9d1ebf7728e8276d334b7da57ee5299b2b7a438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68907 Malicious code in innovative-indigo-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7549d6f57be0f96e1987528f20a5124998f4a4653f8bbbe946ed284d22be4a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71691 Malicious code in yabbering-moccasin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc84b8289f00d4532ad4f9f4b0ed863483ca90b4839cb799c6f9d0e16db341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68748 Malicious code in husky-apricot-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da74283d1a6d977420a8c616d36b3236ab195a553cd93507380c7ebfe1aff4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70611 Malicious code in sick-azure-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ea2ade6910708dee30f46c0fa141d24de55fb2fe8fb19ed4d99c9da79f4e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70916 Malicious code in substantial-maroon-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6a90ade9d396331ccc3727320e77cd0b9577bbd3d9296234ebad391ffd8309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67275 Malicious code in colonial-amethyst-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da3b9a92f1e02ba419ae9ac52036bd8a6cfc5c739f96f22edf0f5eb1564b820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70796 Malicious code in spotless-indigo-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99b1017b8efb49df9a8fd6489cb4a37cc8b15873a3b936cd93bc4efbdea7b4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67860 Malicious code in dramatic-apricot-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63643d7655610cc95d540efaf387f2baf3c43abf0a376540b44b74f2e7b9b578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70115 Malicious code in puzzled-gray-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcf01df41e17086338f54a32182be4cedf919c700c412e4c919fca660d2a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67635 Malicious code in deafening-peach-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1c02855daf0fabcc7f51e418dae1d10126ea0f769b3687dabaa3dce9376c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68224 Malicious code in faithful-violet-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780a0e87ba8e20ce0f434455609e5933973f4bb8dd575541dc450d28ff6bb8af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68658 Malicious code in helpful-plum-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a91e6902b33428b341ba356a20727318d620af836d14e4579138921d12e108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...